gif tunnel problem.

From: Lewis Thompson (lewiz_at_fajita.org)
Date: 03/17/04

  • Next message: W. D.: "Re: RM 1U server for FreeBSD"
    Date: Wed, 17 Mar 2004 18:55:29 +0000
    To: FreeBSD-questions <questions@freebsd.org>
    
    
    

    Hi,

    This is the first time I've looked at gif tunnels and I'm only trying to
    do something simple (by that I mean no IPsec, etc.)

      Diagrams are always useful for this, so here goes:

       (int) (ext) (ext) (int)
    xl0 192.168.0.1 xl1 a.b.c.d -> 'net -> sis0 w.x.y.z rl0 192.168.1.1
    192.168.0.x/24 192.168.1.x/24

      That's a pretty poor diagram, sorry. Basically HostA has is the
    default router for 192.168.0.0/24 with in 192.168.0.1 and external ip
    a.b.c.d. HostB is the same for 192.168.1.0/24 with external ip w.x.y.z.

      I want to set up an unencrypted tunnel between the two subnets using
    gif. So far on HostA I have:

    ifconfig gif0 create
    ifconfig gif0 tunnel a.b.c.d w.x.y.z
    ifconfig gif0 192.168.0.1 192.168.1.1

    and on HostB:

    ifconfig gif0 create
    ifconfig gif0 tunnel w.x.y.z a.b.c.d
    ifconfig gif0 192.168.1.1 192.168.0.1

      I got these from the IPsec chapter in the handbook. It states at this
    point I should be able to ping 192.168.1.1 from HostA. This does not
    work.

      I see the echo in gif0 (using tcpdump) but it never seems to exit the
    gif tunnel and hit xl1. The same is true for HostB.

    netstat -rn on HostA shows:
    192.168.1.1 192.168.0.1 UH 0 3183 gif0

    with an equivalent entry on HostB.

      What am I doing wrong? I've tried to follow the chapter as best I can
    but it has been little help. Anybody able to point out the error in my
    ways?

      Thanks a lot,

    -lewiz.

    -- 
    I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.
    ------------------------------------------------------------------------
    -| msn:purple@lewiz.net | jabber:lewiz@jabber.org | url:www.lewiz.org |-
    
    



  • Next message: W. D.: "Re: RM 1U server for FreeBSD"

    Relevant Pages

    • gif tunnel problem.
      ... This is the first time I've looked at gif tunnels and I'm only trying to ... Basically HostA has is the ... I want to set up an unencrypted tunnel between the two subnets using ... ifconfig gif0 tunnel a.b.c.d w.x.y.z ...
      (freebsd-questions)
    • question on tunnels (VPN)
      ... I have used the following scenario between two hosts (both ... ifconfig gif0 tunnel 192.168.0.1 192.168.0.2 ... local router to remote server, ...
      (freebsd-net)
    • Re: New user getting very discouraged with IPv6 problems, cannot get tunnel working completely :(
      ... I don't think the firewall is blocking ipv6 because ... Don't leave this open after you get the tunnel working. ... packets transmitted, 0 packets received, 100.0% packet loss ...
      (freebsd-questions)
    • Re: IPSEC tunnel without gif?
      ... > seems to imply that gif tunnels are not needed for tunnel mode. ... the external interfaces of the "tunnel endpoint gateway" machines. ... When the pings stopped working I could see that one ... I created the gif tunnels and executed setkey. ...
      (FreeBSD-Security)
    • Re: question on tunnels (VPN)
      ... > I have been experimenting with simple gif tunnels in local network ... > ifconfig gif0 create ... > local router to remote server, ... > simple tunnel, unless my router gets public IP address. ...
      (freebsd-net)